installing template theme files · aggregation of the radio access network (ran) using a radio...

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1

#CNSF2011

© 2011 Cisco and/or its affiliates. All rights reserved. 3

There will be 5B mobile devices and 2B M2M nodes

Video will be 66% of all mobile traffic by 2015

Global mobile traffic will grow 26X to 6.3 EB/mo

Source: Cisco Visual Networking Index (VNI) Global Mobile Data Forecast, 2010–2015

Mobile Video Driving Traffic Explosion


Improve Experiences

Three-screen experience and sessions

Video quality experience

Reduce Costs

Manage “Over The Top”

Optimize use of expensive assets

Increase Revenues

New business models

New services and partnerships

ARPU (Revenue)

Data Traffic

(Costs)

$ Gap

5© 2010 Cisco and/or its affiliates. All rights reserved.

Macro

Consumer

Business Community

1000

100

10

1

1990 1995 2000 2005 2010 2015

Gro

wth

Spectrum

Macro

Capacity

26x

Growth

Future networks supporting the mobile Internet will need to integrate smaller

cell architectures to scale

2G/3G/4G

Wi-Fi

Femto

Source: Agilent


64QAM/

MIMO

16QAM

QPSK

64QAM/

MIMO

16QAM

QPSK

64QAM/

MIMO

16QAM

QPSK

64QAM/

MIMO

16QAM

QPSK

1 km

Macrocell (3G/4G)Voice coverage with uniform

bandwidth, but not always where people are

Limited data capacity

Sub-optimal delivery of high BW to POPs

High CapEx/OpEx: $400K

Poor spectral efficiency

New sites: Zoning issues

Wi-Fi/Femto/PicoDelivers targeted coverage and

capacity

Support high-capacity data

Precision delivery of high BW to POPs

Lower CapEx/OpEx

Good spectral efficiency

Low environmental impact


Four Pillars

• Unified Architecture

Controller-based fast, scale-able L2 & L3 handoff (w/ fast-roaming)

Single security / inter-operability point

Centralized radio-resource-management (RRM) & FCAPS/OAM

• Seamless User Experience

Effortless authentication and roaming

Open or encrypted access with expanded hotspot eco-system (roaming partners and devices)

• Converged Core

Intelligent Gateway (rich media services)

Centralized access and control (e.g. 3G offload)

Charging and policy-enforcement (e.g. Tiered-services)

• Intelligent and secure Access Radio

CAC: Call Admission ControlWCS: Wireless Controller System


Unified Architecture Seamless

Experience

Converged Core Intelligent Radio

Mobility, Carrier-Grade, Scalability, Security

Cisco Solution Pillars

Key SP

Wi-Fi Requirements


• Why a Unified Controller-based Architecture?All successful commercial mobility networks are based on concept of centralized control & aggregation of the radio access network (RAN) using a radio network controller (RNC)

Next-Gen 4G LTE wireless networks also support centralized RAN control (C-plane) and allow separation from the data (U-plane)

• RNC Provides mobility networks with:Radio Resource Management (RRM) to maximize coverage and capacity through network-wide RF quality and interference-aware resource allocation

Controlled handoff

Single security & inter-operability point between RANs

Single access control, SLA and policy-enforcement point


Wireless Access Controller (WAC)

• Wireless Mobility Controller (WMC)Fast and seamless handoff for L2 &L3 services (802.11r/k)

Controls handoff between APs (intra/inter WMC)

Uses RF parameters in mobile-assisted handoff

CleanAir & RRM provide industry-leading interference mitigationCapacity and coverage booster for all deployments

Licensed spectrum ―experience‖ in unlicensed band

LAN, MAN or WAN Connected (L2 or L3 transport)Not limited by size of L2 domain or transport technology

• Wifi Access Gateway (WAG)Per user (PCEF) and per VLAN/SSID policy

WiFi access control (e.g. EAP-SIM, WebAuth, etc)

Inter-network mobility - Proxy Mobile IP (3G-Wi-Fi, inter-vendor)


Complements 2G/3G/4G Network

3G/4G Macro Site

SMB Managed AP

Internet

Stadium / Large Venue

WAC for On Premise

Content Indoor Hotspot

Metro Wi-Fi

Partner NetIP Core

UCS

Wireless Mobility

Controller (WMC)

Wireless Control System (WCS)

IP

Backhaul

Access gatewaysService Control

MSP

Credentials


Where People Go!


• HotZone (e.g. stadium, public venues, metro)

Contiguous coverage area served by full Unified WMC micro-mobility/handoff anchor

WMC co-located with access gateway (WAG) for charging & Internet offload

• HotSpot (e.g. public access retail)

Single facility co-located with access router (e.g. ISR) for charging & Internet offload

Typically a discontinuous coverage area (limited need for micro-mobility)

C-plane only WMC centralized mgmt, provisioning, RRM, etc

• SMB (managed services)

Dual SSID (for MSP) with bundled services (e.g. VPLS, IP-PBX, FMC, etc)

Similar coverage as HotSpot and typically supported with C-plane only WMC

• Residential (MDU)

Clusters of semi-contiguous coverage areas

Similar coverage as HotSpot and full or C-plane only WMC depending on mobility/capacity required


Controller

Based (L2/L3)

Controller-Less

(L2-only)

Data mobility (layer 2 & layer 3)

Real-time mobility (layer 2 & layer 3)

Network capacity optimization

Network security + intrusion detection

Best user experience

Large scale deployment manageability

Future proof architecture

Controller-Based vs. Controllers



Experience




Key SP

Wi-Fi Requirements


• Cisco’s controller-based Wi-Fi architecture provides real-time mobility &

seamless roaming covering majority of the user-experience within the Wi-Fi

cluster

• Mobile IP provides IP service continuity using client-based (CMIP/iWLAN) or

network-based methods (PMIP). This addresses non-SP provided WiFi (e.g.

residential) and inter-network (e.g. Wi-Fi metro -> 3G WAN)

• Seamless Wi-Fi roaming between operators (e.g. 3G offload) is provided by

widely available and emerging authentication techniques and complements

client-based methods (e.g. iWLAN) dependent on Wi-Fi roaming

CMIP: Client Mobile IPPMIP: Proxy Mobile IP


Co

mple

xity

Security

MAC

MAC-TAL

EAP (Cert)

EAP (SIM)

IPSEC

IKEv2*

802.1x

WEB-

Name/Pwd.

WISPr1.0/2.0

Un-Encrypted

Credentials

Encrypted Wi-Fi (Data

& Credentials)

Encrypted

E2E Data

HTTPS Encrypted

Credentials

*3rd-party device client required (e.g. iWLAN)


SEAMLESSSimplifies network discovery

and selection for seamless cellular

data offload

SECUREExtends existing SIM-based authentication

techniques over encrypted Wi-Fi

RELIABLECarrier class solution

PROFITABLEEnables location-based

and value-added services

802.1x , EAP-SIM

Auto SIM

credentials

Next Generation Hotspot

Seamless authentication & Wi-Fi

roaming - Wireless Broadband Alliance

Encrypted Wi-Fi

Link

802.11i

Roam, Authenticate, Monetize

1

802.11u

2 3 4

Mobile “concierge” service

Mobile Service Advertisement Protocol (MSAP)

20© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 6

Sample Scenario HotSpot 2.0

Client

Regular

Client

Manual Setup

1. Power On or Unlock the phone

2. Select WiFi network from pop-up

but has vulnerability to access Rogue AP*

3. Go to Web-auth

4. Browse Web-page and had to put right

credential usually ID/PWD

5. Choose roaming plan

6. Start Internet

Automatic Setup

1. Power On or Unlock the phone

2. Handset automatically validate

network and initiate connection.

Makes WiFi easy-to-use and secure like 3G cellular

802.11u enabled network has compatible with non-11u devices!

Can you tell me your

network info?

Before I associate?

Yes! Here it is,

Realm Name = cisco.com

Auth.type = EAP-SIM

Venue Name

Domain Name

NAI Realm / Authentication Info

HS2.0 Info

802.11u Setup

• Enables device to automatically provide the authentication credentials required by Hotspot

• Faster network discovery and selection

• Makes WiFi easy-to-use and secure like 3G Cellular

• Enables device to automatically figure out whether Hotspot

provides Internet Access by home SP or by a roaming partner


Trial of Mobile Concierge with MSAP

Reach customers at the moment of choice

A New Mobile Experience for Mobile Subscribers

Receive transient applications without

user intervention

Special offers today

Secure Wi-FiNetwork Discovery


Mobility Services Advertisement Protocol (MSAP) query for local services prior to

authenticating to the Wi-Fi network.


• Standardize the authentication process and enable seamless Wi-Fi roaming

• Industry initiative led by Cisco along with Wireless Broadband Alliance

• Demonstrated with these partners at Mobile World Congress 2011



Experience




Key SP

Wi-Fi Requirements


• Coverage – Higher Tx power and additional receiver path increase coverage area up to 25%

• Signal Strength – Higher Tx power and integrated antenna design increase signal strength 2–7 dB for greater coverage and a better user experience

• Total Throughput – Increases total network capacity by 27% per independent testing by Miercom

• Fully loaded network; mix of 11a, 11g, and 11n clients

• Legacy Performance—ClientLink boosts performance of 11b/g clients up to 87%

• QoS—VideoStream brings security and bandwidth efficiency to real-time video applications


Not all Access Points Are the Same

Best in class Radio Resource Management coupled with beamforming to deliver focused power to clients.

Improves Network Throughput and Coverage

Sophisticated spectrum Intelligence to monitor the airwaves, detect, locate and classify interference, alert Ops and reconfigure the network to avoid

Improves Network Reliability

Optimized RF utilization by moving 5 GHz capable client out of the congested 2.4 GHz channels.

Improves Network Throughput

Extends reliable multicast into the wireless network by converting multicast to unicast at the AP.

Quality Video over WLAN

CleanAir

Band Select

Video Stream


High Performance 802.11n Outdoor Wireless

• CleanAir for mission critical performance and reliability

• ClientLink for high density coverage

• Video Stream for quality video

• Band Select for optimized throughput

• DOCSIS 3.0 option

• Internal or External Antennas

Seamless Mobility, Security and RF Excellence


Detect and Classify

Mitigate

Locate

Cisco CleanAir

A system-wide feature that uses silicon-level intelligence to

automatically mitigate the impact of wireless interference, optimize

network performance and reduce troubleshooting costs

Reduces TCO with automated interference mitigation and

troubleshooting

Shared under NDA/Embargo Until Feb 14, 2011


Carrier-Grade Performance

1140 or 1260 Series

2x3 MIMO

RF excellence with:

ClientLink

BandSelect

RRM

VideoStream

For reliable, high-

performance rich media

experience

3500 Series

2x3 MIMO

RF excellence with:

CleanAir

RRM

ClientLink

VideoStream

Band Select

1550 Series – 4 models

DOCSIS 3.0 and EuroDOCSIS 3.0 option

Dual radio APs and dual band stick antennas

RF excellence with:

CleanAir

ClientLink

RRM

IndoorOutdoor


WiFi

Aggregation

HotSpotHotZone

5508 (500AP)

Flex7500 (appliance)

HREAP mode

(2000+ AP)

Catalyst 6500(7000 AP)

+

and/or

WiSM2 – 1000 AP/blade

Up to 7 blades/chassis



Experience




Key SP

Wi-Fi Requirements


Cisco Confidential-Shared Under NDA only © 2011 Cisco Systems, Inc. All rights reserved

Metro/Hotspot Access

Residential Access

Client Centric/Un-trusted Access

Converged Subscriber

Control

AAA Captive

PortalWCS

Cloud Services, Applications, & Operations

DHCP Policy

MgmtSvcs

Reporting

Internet

Application Partners

SMB Managed AP

Stadium / Large Venue Indoor Hotspot

Metro Wi-Fi

Residential

Managed AP

Wi-Fi Controller

and

Backhaul

Cloud

TR-069

CMTS

DSL

Fiber

Own or 3rd party

broadband

access


WiFi Integration Architecture

LTE

WiFi

SGW

AAA

Operator IP

Service Domain

eUTRAN

S1

S1u

S5

SWn

SWm

S6bGx Gy

Gxc

ANDSF

WLAN

MME

PGW

ePDG

S11

PCRF OCS

SGi

HSS

S2c: IPSec + DSMIP6

Client

Client

Client

• Untrusted WiFi access [emerging client ecosystem]

SWu + S2b - IPSec tunnel to ePDG switched to PMIPv6 to PGW;

S2c – DSMIPv6 over IPSec

• Trusted WiFi access (802.1x over the air)

S2a - PMIPv6 infrastructure tunnel from MAG in WiFi to PGW

S2c – DSMIP tunnel from device to PGW

S2c: DSMIP6

SWu: IPSec/IKEv2

S2a: PMIP6


Location Awareness

Usage VisibilityAccess Technology Awareness

Device Awareness $$$

$$$

$$$$$$

IP Intelligence

$$$

$$$

Shape Subscriber

Experience

Subscriber Profile

Network Awareness


IP Services: Converged IP Service functionality

• PDP QoS termination (BW parameters)

• Per user ACLs

• Dynamic Policy control

• Real Time Charging

• Parental Control/ Content filtering

• NAT

• BW Shaping

• Roaming based policy

• Integrated Offload

• Analytics

P2P detection

Dynamic Policy control

Parental Control/ Content Filtering

Per-Subscriber Firewall

Application Detection

URL Re-write

Advertising filters

Fair Usage Control

Analytics

Application proxy

TCP Optimization

Header Enrichment

HTTP Compression

URL Re-write

Advertising filters

Analytics

Video Pacing

Media Optimization

Transrating

Analytics

IP Point of Attachment Deep Packet InspectionTraffic PacketOptimization

VideoGateway


Internet

Services

Reporting

5508 (WMC)

Outdoor .11

D2 Mesh AP

CCKM (fast roaming)

Indoor .11

LM / Mesh AP

Data center

Services, Applications, & Operations

SCE - CM/SM

CNR - DNS/DHCP

Services

Reporting Portal + WISPr 1.0

CAR – AAA

Policy Mgmt

Sub/Svcs Mgmt

WCS

5508 (WMC)

In / Outdoor

.11 AP

Access Zone

Router

Autonomous

.11 AP

Outdoor .11

APIndoor .11

AP

On Premise

ContentISG

ASR 1K – WiFi Access Gateway*

WLAN Access control (ISG)WAG

L2TPv2 (LAC/LNS) L3VPN

5508 (WMC*)

StadiumMetroHotSpot / HotZone

CCKM (fast roaming) CCKM (fast roaming)

CoA SNMP

WiFi Internet access + best-effort 3G offload

Control only

NAT/FWSM

WiFi Core

L2TPv2 (LAC/LNS)/L3VPN

L2 (.1Q)

Mobile Core

CAR – AAA

HSS

HLR

L2 (.1Q)

*WAG != 3GPP WAG

**WMC ~= WLC

EAP-SIM

EAP-AKA

3rd-party Connection

Managers

Client Centric


Local

services

Internet

Services

Reporting

FLex7500 HREAP

(indoor-only)5508 WMC

L2 (.1Q)

Outdoor 11n

D3 Mesh AP

CCKM (fast roaming),

Clean Air, HS2.0*

Indoor 11n

LM / Mesh AP

UCS

Cloud Services, Applications, & Operations

SCE - CM/SM

CNR - DNS/DHCP

Services

Reporting Portal + WISPr 1.0

CAR – AAA

Policy Mgmt

Sub/Svcs Mgmt

UCS

WCS

UCS

5508 WMC

IPSec/IKEv2

(Untrusted 3GPP IP

access)

IPsec/IKEv2

I-WLAN ClientsIn / Outdoor 11n

AP, D3

Autonomous

11n AP

Outdoor 11n

APIndoor 11n

AP

On

Premise Content

ASR 1K

ISG

ASR 1K – Wifi Access GW

WLAN Access control (ISG)

Subscriber/Services Policy Enforcement (SCE)

Mobile Access gateway (MAG)

WAG

Indoor 11n Indoor 11n

StadiumMetroHotSpot / HotZone / SMB Client Centric

CCKM (fast roaming), CleanAir , HS2.0* CCKM (fast roaming),

Clean Air, HS2.0*

Gx

/CoA

WiFi access with premium (core-centric) 4G offload

WLAN Direct IP

Access

ASR 5K

3GPP Mobile Core

UCSHSS

CAR – AAA

Policy Mgmt

GTP / PMIPv6

EAP-SIM

EAP-AKA

(e)PDG/TTG

ASR 5K

NAT/FWSM

PMIPv6 (Trusted

3GPP IP access)

WiFi Core

EAP-SIM

EAP-AKA

Access Zone

Router 5508 WMC

MME/SGW

Control only

L2TPv2 (LAC/LNS)/L3VPN

SNMP

HLR

L2 (.1Q)

*DEMO/PoC only

PCEFPMIPv6

PGW

GGSN


AP/WLC

AuC

WAGHome AAA

(Mobile Core)

HLR

IMSI

Ki Rand

A3

IMSI

Ki Rand

A3

SRES

SRESc

IMSI

RAND

SRESc

RADIUS access request

Getauthinfo + IMSI MAP

SendAuthInfo (IMSI)

MAP

SendAuthInfo Resp

RADIUS access accept

Auth Triplets

(RAND, SRES,..n)

If SRESc == SRES

Authenticated


Solutions for each mobile operator scenario

Infrastructure-based: Operator deploys WiFi for data access & offload

• Build Trusted WiFi N/W (802.11i)

•Evolving from open/WiSPr1.0 based N/W to secure 802.1X-based N/W

• (Preferred) N/W based tunnel (PMIPv6)

•local access/QoS

•3GPP core access

•WiFi-WiFi mobility (e.g. inter-MSO)

•WiFi-4G (w/ client virtual adapter)

• NextGen Hotspot (NGH) for seamless WiFiroaming & L2 security

•N/W discovery/selection & service advertisement (802.11u)

•Auto login & online sign-up

Client-based: Mobile operator needs ubiquitous WiFi access to 3GPP mobile

core services

(Preferred) Trusted WiFi N/W

NGH/802.1X + PMIP for E2E security & WiFi/4G IP mobility

ConnMgr uses trust indication (3GPP 33.402/RFC4187) to skip iWLAN tunnel

Un-trusted WiFi N/W (residential, 3rd-party operator, etc)

Security: Client Triggered Tunnel(iWLAN-IPSec/IKEv2)

WiFi-3GPP IP mobility:

3G/UMTS: CMIPv4

4G/LTE: DSMIPv6 (w/opt IP Flow Mobility for local access)


Build or use

existing ?

Operator deploys

WiFi N/W

Build Trusted WiFi N/W

(802.11i)

Local access/QoS, 3GPP core access

WiFi-WiFi mobility (e.g. inter-MSO)

WiFi-4G (w/ client virtual adapter)

Preferred N/W based tunnel (PMIPv6)

HGH WiFi roaming & L2 security

N/W discovery/selection & service advert. (802.11u)

Auto login & online sign-up

Client-based: ubiquitous WiFi access to 3GPP core & services

Operator leverage

(partners) existing WiFi

N/W

Trusted WiFi N/W (802.11i)

NGH/802.1X + PMIP for E2E security & WiFi/4G IP mobility

ConnMgr uses trust indication (3GPP 33.402/RFC4187) to skip iWLAN client-tunnel

Un-Trusted WiFi

(residential,3rd party,..)

Security: Client Trigg. Tunnel (iWLAN-IPSec/IKEv2)

WiFi Offload

ΣΣ

IP mobility: DSMIPv6

w/local access via IFOM

4G/LTE

IP mobility:

CMIPv4

3G


• Optimization – increases network capacity and reduce 3G data traffic overload by offloading traffic with SP Wi-Fi.

• Monetization – creates new revenue streams by taking advantage of advanced technology that provides secure delivery of location-based services to mobile devices

• Churn Reduction – expand a physical footprint with a cost-effective Wi-Fi solution to keep customers on the service provider network as they move from home to the train to the office.


Mobile World Congress 2011

• Operate free Wi-Fi Hotspot network for attendees

CleanAir – Intelligent Reliability

ClientLink – High Density Coverage

Video Stream – Quality Video

Band Select – Optimized Throughput

• Cisco Cloud Connect

Managing wireless cloud services

.


• Wi-Fi broadband connectivity free to thousands of fans

• 3G offload for all smartphone and broadband devices through transparent authentication

• On-net video instant replay live during game or show

Optimization through 3G Offload


Monetization through Premier Services

• Wi-Fi Replay – Video highlights

• Food Finder – Local food & coupons

• Fan Captions – Closed captioning of PA announcements

• Game Tracker – Scores, statistics and player profiles

• Interactive Games – Play virtual games with other fans

• Concierge – Stadium history and local information


Churn Reduction at Cablevision

• Continuous coverage for NY metro area with more than 25,000 APs (indoor and out)

• Now installed on ferry and commuter trains

• Large convention coverage in Madison Square Garden and Radio City Music Hall

• Increases customer ―stickiness‖ with differentiated Wi-Fi service for reduced churn

Outdoor Heat Map NYC


MSO Wi-Fi Press release Link

SSID = optimum Wi-Fi

SSID = Xfinity (Comcast)

SSID = TWC Wi-Fi

One AP for 3 MSOs

Cisco Aironet 1260

Wi-Fi broadband connectivity free to 3 MSOs – more than 5M subs

http://www.multichannel.com/article/451503-Cablevision_Comcast_TWC_Hook_Up_On_Wi_Fi.php








• Optimizes network and reduces cost by offloading data traffic to Wi-Fi

• New service and revenue opportunities

• Visibility into RF spectrum to manage interference and prevent unexpected downtime

• Enhanced user experience with Wi-Fi

• Secure roaming between networks

• Faster download speeds with Wi-Fi

End UserService Provider


#CNSF2011

Thank you.

#CNSF2011

installing template theme files · aggregation of the radio access network (ran) using a radio...

Documents